{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "data breach", "trigger": true, "arguments": ["purpose", "attacker", "number of data", "time", "compromised data", "number of victim", "attack pattern", "tool", "victim", "damage amount"]}, {"event_type": "ransom", "trigger": true, "arguments": ["tool", "time", "attack pattern", "damage amount", "victim", "attacker", "price"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["vulnerability", "vulnerable system", "vulnerable system version", "discoverer", "vulnerable system owner", "capabilities", "supported platform", "time", "common vulnerabilities and exposures"]}, {"event_type": "phishing", "trigger": true, "arguments": ["attack pattern", "tool", "victim", "damage amount", "attacker", "place", "time", "purpose", "trusted entity"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["vulnerable system version", "common vulnerabilities and exposures", "releaser", "patch number", "patch", "vulnerability", "supported platform", "issues addressed", "vulnerable system"]}], "input": "While the phishing messages might look legitimate at first glance , it 's worth noting they do n't use the right domain - the fake messages come from ' @mail ."}
{"data breach": [], "ransom": [], "discover vulnerability": [], "phishing": [{"trigger": "come from", "arguments": {"attack pattern": "NAN", "tool": ["the phishing messages", "the fake messages"], "victim": "NAN", "damage amount": "NAN", "attacker": "NAN", "place": "NAN", "time": "NAN", "purpose": "NAN", "trusted entity": "NAN"}}], "patch vulnerability": []}